Abstract: Files stored on a hard disk drive are scanned for a predefined pattern, such as a virus definition. For each one of a plurality of files, predetermined select portion(s) (e.g., likely sites of infection) are stored in a common file. After storing the predetermined select portions, the portions are tested without accessing the file to determine whether content of the predetermined select portion corresponds to the predefined pattern.

Abstract: A virus and malware cleaner is generated for a personal computer. Scanning software determines the presence of suspicious attributes resident to the computer. When automated detection of the need for a Custom Cleaner occurs, specific system information, along with information about the suspicious attributes, is included in a Custom Cleaner Request. The request is automatically generated and transmitted to a server for processing. In response a Custom Cleaner may be automatically created from a database of parameterized instructions, then downloaded to the user's computer for execution. Automatic verification of the Custom Cleaner success in removing infected files may/be sent to the server. In the event that a Custom Cleaner cannot be generated automatically, an escalation occurs in which a support technician becomes involved in preparing the Custom Cleaner. Escalation data accessed by the support technician may include automatically generated diagnostic hints.